Comprehensive European Union privacy rules take effect for all
industries in late May 2018. The change affects all verticals including
bank cards. U.S. industries must examine their customer bases to ensure
they are not at risk.

The report summarizes the specifics of the EU's new privacy rules and
risks to U.S. businesses that do not prepare for the latest EU mandates.

Unlike the revised Payment Services Directive (PSD2), which has only
a partial influence on U.S. card markets, the General Data Protection
Regulation can cause non-European markets regulatory fines. Keep in mind
that compliance with PCI does not mean your organization satisfies
GDPR's privacy and data breach requirements. If there is even one EU
citizen in your credit file, you need to ensure compliance.

Report Highlights

Comparison of U.S. and EU noncash payments

Projected EU noncash payments in the EU market, 2013-2022

Noncash usage in EU and population by country

Six objectives of the General Data Protection Regulation

Penalties for noncompliance

Key Topics Covered

1 Executive Summary

2 European Payment Cards: A $500 Billion Market

Payments in the European Union: Almost Half of Noncash Payments on
Cards

The European Market: Population and Card Usage

The Payment Services Directive: A Refresher

General Data Protection Regulation

Establishing Data Protection Rights

Personal Data: The Crux of GDPR

3 General Data Protection Regulation Takes a Stand to Enable Personal
Control